Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problems in address distribution in DHCP

    Scheduled Pinned Locked Moved DHCP and DNS
    46 Posts 7 Posters 4.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      While it is possible to pass vlan tags across a dumb switch - since it doesn't understand the tags.. There will be no isolation on that switch... All broadcast will go over all ports no matter the vlan it is suppose it suppose to be in.

      Just because a dumb switch might not actually strip a tag, doesn't mean its good idea to run vlans over such a device...

      If your going to use vlans than all your devices should support vlans - other than you can leverage dumb switches that are access level switches where only clients in the same vlan will be connected, and the only vlan that will go to that end switch is in a specific vlan... Ie as a downstream switch from a smart switch.. But no other vlans should cross over that switch.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • I
        Itay1787
        last edited by Itay1787

        I will tell you what I want to do as best I can explain and you will tell me whether it will work or not. OK?

        1. All my AP supports VLANs and multiple SSIDs.
        2. I have a smart switch that is the first and the main. The rest are not smart switches.

        I want to pass a VLAN tagged from the main switch
        Will pass through the non-smart switches to the APs. Then the APs will take the VLAN tagged, without damaging the rest of the network. Will it work?

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by johnpoz

          Why do you have to pass the AP across the dumb switch? Connect it to the smart switch... If you need the switch as an extension for the run - pick up a 40$ smart switch to use and hang your dumb switch off that.

          Can you run the vlan tags across the dumb switch - more than likely they will not strip it... But what they will do since they do not understand vlans is all clients on this dumb switch will see all broadcast traffic from every vlan that cross over that switch. And any client on that dumb switch could just add a tag and join any vlan they want.

          It is NOT how you run a network!!!

          You might get away with this if your order of smart switches got delayed and you had to bring this up NOW or loose money because production is down and all you have is some dumb switch to use.. But this not how anyone who works in IT would do it... you might as well just run 1 flat network if this is how your going to run a network.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          I 1 Reply Last reply Reply Quote 0
          • I
            Itay1787 @johnpoz
            last edited by

            @johnpoz I can not replace all the non-smart switches there are too many such a network that literally size more than 300 stationary computers connected to it !!!

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @Itay1787
              last edited by

              @itay1787 said in Problems in address distribution in DHCP:

              @johnpoz I can not replace all the non-smart switches there are too many such a network that literally size more than 300 stationary computers connected to it !!!

              I believe he suggested running a cable from the AP to managed switch. Is that not possible? How many APs are we talking about?

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              I 1 Reply Last reply Reply Quote 0
              • I
                Itay1787 @JKnott
                last edited by

                @jknott It really is not possible
                There are about 10 to 12 AP

                JKnottJ 1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @Itay1787
                  last edited by

                  @itay1787 said in Problems in address distribution in DHCP:

                  @jknott It really is not possible
                  There are about 10 to 12 AP

                  Any chance you could have just the APs on a dumb switch?

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • H
                    heper @JKnott
                    last edited by

                    @jknott said in Problems in address distribution in DHCP:

                    VLAN tagging will pass through dumb switches.

                    if you are lucky. more often they just vanish, or get corrupted.

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @heper
                      last edited by JKnott

                      @heper said in Problems in address distribution in DHCP:

                      if you are lucky. more often they just vanish, or get corrupted.

                      Any switch that does that is defective. A switch is supposed to pass any and all valid Ethernet frames. A valid Ethernet frame consists of destination & source MACS, payload and CRC. What distinguishes a VLAN frame from others is the contents of the Ethertype/length field. The VLAN tag is carried in the payload area and should not be touched by a switch. The exception being managed switches configured for VLANs, which create, forward and remove the VLAN frames. There is absolutely no reason why an unmanaged switch would handle a VLAN frame differently than any other. The only exception would be ancient gear that cannot handle Ethernet payloads greater than 1500 bytes. If you run into switches like that, then just reduce MTU to 1496 to avoid the problem.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • I
                        Itay1787
                        last edited by

                        In the next few days I'm going to try to run the VLANs from the main switch and send it over the network via VLAN tagged. And see if the APs will work with it and that the rest of the network will be OK .....

                        Now I remembered having AP that they are in client mode so I have to check what to do with it.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          What are these AP exact make and model? Client Mode doesn't sound like an AP that supports vlans to me ;)

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          I 2 Replies Last reply Reply Quote 0
                          • I
                            Itay1787 @johnpoz
                            last edited by

                            @johnpoz said in Problems in address distribution in DHCP:

                            What are these AP exact make and model?

                            I can not tell you right now, I'm not there. But in two days I'll be there and tell you.

                            1 Reply Last reply Reply Quote 0
                            • I
                              Itay1787 @johnpoz
                              last edited by

                              @johnpoz said in Problems in address distribution in DHCP:

                              What are these AP exact make and model?

                              Wavion: WBS-2400 SCT-120-FCC

                              Planet: WNAP-1110

                              TP-Link: TL-WA7210N

                              EnGenius: EAP1200H

                              EnGenius: ENS202EXT

                              D-Link: DAP 1360

                              1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator
                                last edited by

                                So a standard is just nowhere at all? So was it like the school asked the students to donate their old home shit?

                                The TL-WA7210N is an outdoor device - more designed for WISP.. It does have a multi-ssid mode, which from my 2 second breeze over of the manual would mean it needs to be in that mode to do that vs say the "client mode" you mentioned.

                                The DAPโ€‘1360 is a N repeater for gosh sake... Makes ZERO mention of vlan support.

                                Really a WBS-2400 SCT-120-FCC, So how about you go into a bit more on this wifi deployment - and how internet is actually brought into the location... So your on a WISP? for internet? You provide internet to remote building via wifi? etc.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                I 1 Reply Last reply Reply Quote 0
                                • I
                                  Itay1787 @johnpoz
                                  last edited by

                                  @johnpoz said in Problems in address distribution in DHCP:

                                  So a standard is just nowhere at all?

                                  There are no standards in anything !! And this is really a problem but there is nothing to do.

                                  So was it like the school asked the students to donate their old home shit?

                                  ๐Ÿ˜‚ ๐Ÿ˜‚ ๐Ÿ˜‚

                                  The TL-WA7210N is an outdoor device - more designed for WISP.. It does have a multi-ssid mode, which from my 2 second breeze over of the manual would mean it needs to be in that mode to do that vs say the "client mode" you mentioned.

                                  All of the APs I've listed above are used for school. Some in client and some in AP
                                  So regarding these TP-Link, I'll have to think about how to move a cable there with we want VLANs

                                  The DAPโ€‘1360 is a N repeater for gosh sake... Makes ZERO mention of vlan support.

                                  The DAP-1360 currently managed to flip all but one used as a client mode but it only gets WiFi. - He can not do some things at the same time Do not forget yet it's about D-Link Do not expect too much.

                                  Really a WBS-2400 SCT-120-FCC, So how about you go into a bit more on this wifi deployment - and how internet is actually brought into the location... So your on a WISP? for internet? You provide internet to remote building via wifi? etc.

                                  Internet access to this school comes through Fiber
                                  There are 4 such wavion of the same type, from the same model. And each institute for different places should give a reception of WiFi. These are the main APs. It's not something new they've been around for about 7 years - hoping to replace them in the coming months but right now there's no talk about it.
                                  Hope I answered everything.

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.